What are the most common HMRC tax refund scams in the UK?

Phone phishing that threatens arrest or offers instant refunds, emails or texts with fake .gov.uk lookalikes, QR code letters, and requests for gift cards, bank transfers or card details. HMRC does not give refunds by text or ask for bank details by email. Verify only through your HMRC account.

How can I quickly verify a tax contact is real?

Ignore links and call-backs. Sign in to your HMRC account via GOV.UK or the HMRC app to check for messages. Find contact numbers on GOV.UK yourself. Real agents will not rush you to pay or share bank details. These cybersecurity tips stop most scams in minutes.

What should I do if I shared data or money?

Call 159 to reach your bank’s fraud team, ask to freeze or monitor affected accounts, and change account passwords. Report to Action Fraud and forward any phishing to phishing@hmrc.gov.uk or 60599 for texts. Consider CIFAS Protective Registration and review your credit files for new accounts.

Why do tax-season scams matter for investors?

Fraud waves increase chargebacks, provisions and security spend, which can pressure margins at banks, fintechs and tax-prep platforms. Watch updates on fraud loss rates, adoption of MFA and Confirmation of Payee, and any guidance on rising opex. Strong controls often support customer trust and retention.

Law and Government

February 18 Cybersecurity Tips: Stop Tax-Season Phone and Email Scams

ByHuzaifa Zahoor February 19, 2026February 19, 2026

As UK taxpayers file returns, we need cybersecurity tips that stop tax refund scams before they drain accounts. Fraudsters copy HMRC by phone, email, text and even letters to grab bank details and National Insurance numbers. That risk also hits banks and fintechs through higher fraud losses and security costs. Today’s guide gives quick checks, safe reporting routes and practical investor angles for GB readers. Use it to verify first, act fast and keep your money and data safe.